Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
File:                     R8x-nha98tTmHHXufgADPnZvmJc.mft (raw, json)
Hash identifier:          XxSdaJ/QRZt+jjvk3+PG/ZQGjSneO9mXrFc5fafLsyo=
Subject key identifier:   88:06:CE:82:D8:21:0A:60:34:9E:D8:F4:2B:24:EB:F6:EC:6E:0F:13
Authority key identifier: 47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97
Certificate issuer:       /CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
Certificate serial:       01962DF3CCA80FCE0FFA3096717B008DABD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 07:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:14 +0000
Files and hashes:         1: R8x-nha98tTmHHXufgADPnZvmJc.crl (hash: ScfW991bRfBgV6b6kCdaveNb6d+nAJwnamcGG158Zm4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:cc:a8:0f:ce:0f:fa:30:96:71:7b:00:8d:ab:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47cc7e9e16bdf2d4e61c75ee7e00033e766f9897
        Validity
            Not Before: Apr 13 07:01:14 2025 GMT
            Not After : Apr 14 07:01:14 2025 GMT
        Subject: CN=8806ce82d8210a60349ed8f42b24ebf6ec6e0f13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9e:c4:15:19:03:06:59:37:cf:10:b6:ef:10:
                    ff:53:28:ce:44:93:24:ea:14:89:09:bc:5f:24:29:
                    ce:7a:0d:c0:97:d2:c8:55:fd:07:06:12:74:ef:01:
                    72:b2:d8:fb:9c:05:97:0a:83:55:d9:5a:ce:bb:f4:
                    15:1e:46:51:2c:a1:ba:d4:76:a9:c6:37:31:9d:c7:
                    58:b0:4d:d7:ee:55:d7:e6:46:c7:66:24:b0:36:41:
                    a7:1e:1c:b2:f9:e5:c0:0a:64:8e:d2:59:7c:57:6f:
                    9d:46:36:ec:0e:6c:5b:ba:ac:90:4c:45:38:49:9f:
                    7d:d5:ad:a8:9d:7e:d4:4b:a5:58:3d:bf:bb:f5:51:
                    2a:5b:14:9f:d0:a1:03:5d:11:ee:99:ca:26:9b:ca:
                    1a:58:e8:41:8f:2c:70:63:4e:d7:e6:9b:b7:1b:56:
                    58:14:60:70:07:da:1b:8b:8a:19:ee:78:f3:62:f7:
                    4c:5e:9d:a4:36:4a:c5:b7:3c:84:22:8c:7f:2f:0b:
                    dc:51:c4:0a:56:ea:c0:c2:09:8d:c9:bb:12:be:c0:
                    22:f1:3a:fd:bc:18:8b:43:ab:ca:26:6c:c4:bf:f4:
                    f2:3a:7f:76:bd:60:cb:8c:ab:bd:6c:a1:43:1b:a2:
                    01:14:a6:ca:fe:14:9e:f0:7b:f6:41:80:53:9c:8c:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:CE:82:D8:21:0A:60:34:9E:D8:F4:2B:24:EB:F6:EC:6E:0F:13
            X509v3 Authority Key Identifier:
                keyid:47:CC:7E:9E:16:BD:F2:D4:E6:1C:75:EE:7E:00:03:3E:76:6F:98:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8x-nha98tTmHHXufgADPnZvmJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ca5b7b-b5d6-40af-877c-1a7f84b40792/1/R8x-nha98tTmHHXufgADPnZvmJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:5e:98:21:65:d7:f5:ad:40:75:3c:f5:8a:af:3b:cc:74:4d:
         35:d5:ad:50:d2:61:8b:04:29:65:f4:f6:6e:45:81:1b:55:20:
         b8:fd:7b:ff:50:6f:5d:10:c5:4e:a7:08:b8:36:47:f3:68:3a:
         4c:ae:0c:5a:1e:5a:96:16:33:07:3d:94:a7:d1:7e:22:79:5b:
         ee:35:7e:a8:61:9f:7f:ac:0a:58:5d:20:73:0b:bc:ef:9f:c1:
         37:6e:02:c7:4d:aa:4b:85:25:b7:bd:5f:33:e0:74:00:11:eb:
         71:74:18:d2:75:76:96:db:ed:16:8d:ac:1a:67:1c:94:b4:8a:
         35:2e:e4:00:f9:2d:da:3e:cf:9c:26:cb:cd:bc:f4:34:6b:03:
         04:c6:3a:ae:f9:ac:2e:92:37:89:6f:cb:da:ae:2c:3c:21:58:
         c5:45:22:c4:26:fb:0a:8e:21:57:ae:2b:98:35:d2:48:07:df:
         ce:da:38:ce:cf:3d:b5:74:25:cc:21:d0:8c:54:dc:41:02:75:
         67:4e:1a:64:11:88:b4:bb:e1:9a:3b:bf:65:84:cb:6f:ff:24:
         85:b2:a6:3a:0d:9f:f3:fe:28:46:36:03:83:c1:04:d3:f6:09:
         a3:a2:5a:ac:a8:a8:1b:30:43:8b:0d:6a:dc:3e:8e:9a:49:ec:
         05:15:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----